Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1QzFXiKyQjGt7eyJb1toR_SQ_bA.roa
File: 1QzFXiKyQjGt7eyJb1toR_SQ_bA.roa (raw, json)
Hash identifier: hMSThy0XBPhdL6ZktzEtwYuAqqGT0RFjzFBAFtMofxU=
Subject key identifier: D5:0C:C5:5E:22:B2:42:31:AD:ED:EC:89:6F:5B:68:47:F4:90:FD:B0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0475
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1QzFXiKyQjGt7eyJb1toR_SQ_bA.roa
Signing time: Tue 13 May 2025 00:37:56 +0000
ROA not before: Tue 13 May 2025 00:37:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 00:37:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D50CC55E22B24231ADEDEC896F5B6847F490FDB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:de:d6:ae:69:fd:87:13:74:f2:83:8d:fa:
e3:bf:d5:a3:cc:b5:20:f2:a2:03:a4:2a:35:d9:23:
23:09:c9:58:b8:b2:89:c6:14:93:a9:75:87:31:35:
bf:35:d9:64:f4:af:a3:30:14:80:7d:d0:f9:44:1f:
98:b2:ae:2f:b6:52:2d:2f:86:0a:cb:75:3f:ee:38:
93:69:fe:87:5f:3b:cc:5c:1e:0d:5f:09:45:80:d1:
7b:9a:2f:85:c7:c2:0b:62:07:8e:6f:77:40:f9:da:
63:64:42:43:08:6c:bd:1c:c1:d0:e3:5f:1e:1f:ea:
cc:44:91:cf:5c:5c:02:a9:16:48:ae:b3:32:dc:a5:
b3:75:59:ed:e2:32:2c:c9:5a:f1:a0:f5:d7:67:5c:
c4:3f:36:c0:5e:c6:97:60:d4:04:09:fd:9c:11:31:
c6:dc:ed:a9:b8:c9:b2:bb:41:23:2d:22:a6:32:c8:
00:88:0a:00:c7:e4:ad:b9:3e:2a:f5:2d:a0:3f:ee:
2b:81:2a:2f:bc:21:43:56:a3:48:ed:23:99:89:33:
84:fb:2c:01:63:86:33:54:f5:72:d4:08:3a:84:00:
e9:a2:0b:17:01:f6:f9:63:44:a3:23:1b:95:fb:45:
fd:24:4f:8b:8f:89:14:c4:40:a8:63:39:d5:77:ac:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0C:C5:5E:22:B2:42:31:AD:ED:EC:89:6F:5B:68:47:F4:90:FD:B0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1QzFXiKyQjGt7eyJb1toR_SQ_bA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:6b:64:df:8e:8f:d6:b6:67:48:72:73:10:f9:1d:07:74:8b:
2b:9e:a5:59:df:d8:c6:3f:48:28:bf:e4:f8:60:ce:ee:88:1d:
b8:67:b7:9f:9a:73:3a:53:4f:47:fb:60:cc:6b:9e:a7:16:00:
0b:89:7c:84:08:58:12:39:01:a4:30:ad:2c:32:6f:a2:f9:68:
92:69:f0:63:0d:ee:d3:c7:e9:f4:01:e3:85:53:25:b9:b2:be:
d6:dc:bb:a2:56:23:0c:a1:5d:ed:64:19:59:1b:b5:21:40:65:
72:40:20:37:3f:f6:64:23:cc:2b:a7:3d:54:dd:1a:9a:b5:7e:
d4:63:6f:1a:7b:8b:53:60:a8:85:b7:f6:bc:8b:fc:e2:fe:e1:
b6:a7:b9:82:18:0a:9b:26:db:55:f6:c1:d8:98:7b:7a:fc:15:
d5:7d:7a:1d:7b:e3:ae:d1:79:80:5a:48:72:8e:30:06:97:a9:
ef:70:a7:ed:3e:6d:f0:ea:b9:69:c4:6f:2a:df:d0:f5:ee:6f:
d8:54:58:28:c2:3d:09:b9:80:4e:8b:58:77:0c:92:af:99:88:
68:54:f8:9a:10:eb:aa:a8:3e:47:17:88:3c:41:59:cb:55:9c:
84:9f:81:07:b1:0e:10:c3:91:52:e9:67:1f:4a:84:19:a0:41:
0d:54:be:01
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMw
MDM3NTZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEQ1MENDNTVFMjJCMjQy
MzFBREVERUM4OTZGNUI2ODQ3RjQ5MEZEQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTo97Wrmn9hxN08oON+uO/1aPMtSDyogOkKjXZIyMJyVi4sonG
FJOpdYcxNb812WT0r6MwFIB90PlEH5iyri+2Ui0vhgrLdT/uOJNp/odfO8xcHg1f
CUWA0XuaL4XHwgtiB45vd0D52mNkQkMIbL0cwdDjXx4f6sxEkc9cXAKpFkiuszLc
pbN1We3iMizJWvGg9ddnXMQ/NsBexpdg1AQJ/ZwRMcbc7am4ybK7QSMtIqYyyACI
CgDH5K25Pir1LaA/7iuBKi+8IUNWo0jtI5mJM4T7LAFjhjNU9XLUCDqEAOmiCxcB
9vljRKMjG5X7Rf0kT4uPiRTEQKhjOdV3rIUpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU1QzFXiKyQjGt7eyJb1toR/SQ/bAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8xUXpGWGlLeVFqR3Q3ZXlK
YjF0b1JfU1FfYkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBADFrZN+Oj9a2Z0hycxD5HQd0iyuepVnf2MY/
SCi/5Phgzu6IHbhnt5+aczpTT0f7YMxrnqcWAAuJfIQIWBI5AaQwrSwyb6L5aJJp
8GMN7tPH6fQB44VTJbmyvtbcu6JWIwyhXe1kGVkbtSFAZXJAIDc/9mQjzCunPVTd
Gpq1ftRjbxp7i1NgqIW39ryL/OL+4banuYIYCpsm21X2wdiYe3r8FdV9eh17467R
eYBaSHKOMAaXqe9wp+0+bfDquWnEbyrf0PXub9hUWCjCPQm5gE6LWHcMkq+ZiGhU
+JoQ66qoPkcXiDxBWctVnISfgQexDhDDkVLpZx9KhBmgQQ1UvgE=
-----END CERTIFICATE-----
Generated at Sun May 18 12:22:31 2025 by rpki-client